Privacy Policy
This policy explains what UCMdraft ("UCMdraft", "we", "us") collects when you use ucmdraft.com and the UCMdraft application, how we use it, and the choices you have. UCMdraft is software that drafts utility conflict matrix rows from roadway plan sheets for an engineer to review.
1. What we keep, and why
- To log you in: your name, work email, a hashed password (never the password itself) and, if you choose to give it, your company name.
- To save your projects: the file name, page count, chosen state, and the conflict matrix rows created from your sheets (utility owner, facility, station, offset, the callout text each row came from and where it sits on the page, review status, and who on your team reviewed it).
- Your plan sheets: not kept. The PDF is held in server memory only while you work, so pages can be shown and read, and is discarded when the session ends, the server restarts, or after 4 hours, whichever comes first. It is never written to disk or to our database.
- To bill your plan: payments are handled by Stripe. We receive your plan, subscription status and a Stripe customer ID, never your card number.
- To answer you: what you send through the contact form or by email.
- To keep the service running safely: standard server logs (IP address, browser type, pages requested, errors) kept by our hosting provider.
2. How we use it
- To run the service: read your sheets, draft and measure rows, save your projects and produce Excel exports.
- To manage your account and team seats, confirm your email address and send invitations you request.
- To bill subscriptions and prevent fraud.
- To answer your questions and send service notices (for example, about your account or changes to these policies).
- To keep the service secure and fix problems.
We do not sell or rent personal information, and we do not use it for advertising.
3. AI processing
To read a sheet, the page image and text are sent to Google's Gemini API, which returns the draft rows. Google processes that content under its Gemini API terms, which may allow Google to use it to improve its services. UCMdraft itself does not use your plan sheets or rows to train any AI model. If your project's confidentiality terms don't allow sharing plan sheets with an AI provider, please don't upload them.
4. Who processes data for us
| Provider | What for |
|---|---|
| Render | Hosting the application and its database (United States) |
| Google (Gemini API) | Reading plan sheet pages to draft rows |
| Stripe | Payments and subscriptions |
| Resend | Sending account emails (confirmations, team invites) |
| Cloudflare | Domain name service and forwarding of email sent to ucmdraft.com addresses |
Each provider handles data only to provide its service to us. We may also disclose information if required by law, to protect the rights and safety of our users or the public, or as part of a sale or transfer of the business (in which case this policy continues to apply).
5. Team accounts
On Team and Business plans, projects and rows are shared with everyone on the team, and each row shows who last reviewed it. The account holder can see the team's members and remove them. If you leave or are removed from a team, projects you created for the team stay with the team.
6. Cookies and browser storage
We use one essential cookie to keep you signed in, and your browser's local storage to remember your session and simple preferences such as your last-selected state. We do not use advertising or third-party tracking cookies.
7. How long we keep data
- Uploaded PDFs: in memory only, at most 4 hours.
- Account and project data: while your account is open, so your projects are there when you come back. When you ask us to delete your account, we delete it and its projects within 30 days, except records we must keep for tax, accounting or legal reasons (such as billing records held by Stripe).
- Sign-ups that never confirm their email: deleted automatically after 30 days.
- Contact messages: deleted automatically after 12 months, or sooner if you ask.
- Server logs: kept by our hosting provider for a limited period, typically a few weeks.
8. Security
Connections are encrypted with HTTPS. Passwords are stored as salted hashes. Each account can only reach its own projects (or its team's, on team plans). No system is perfectly secure, so please use a strong, unique password and tell us right away if you suspect misuse of your account.
9. Your choices and rights
You can view and correct most of your information in the app. To get a copy of your data or to delete your account, email support@ucmdraft.com from your account's email address. Depending on where you live, you may have additional rights (for example, to know what we hold about you or to opt out of certain processing); we honor those requests as the law requires and will not treat you differently for making them.
10. Children
UCMdraft is a professional tool and is not intended for anyone under 18. We do not knowingly collect information from children.
11. Changes
If we change this policy, we will update the date above, and for significant changes we will tell account holders by email or in the app before the change takes effect.
12. Contact
Questions or requests: support@ucmdraft.com.